$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: dGTrGF3luFgzYIa77gqxRjIOhBG1mmWJFfhA3Mu6mhA= Subject key identifier: DB:9F:BE:2A:08:F0:62:7B:66:49:5F:45:72:CC:B9:45:0E:0C:5B:D3 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 0198364C745D599C94726BA7E5BAE6B075F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 11EB Signing time: Wed 23 Jul 2025 08:00:36 +0000 Manifest this update: Wed 23 Jul 2025 08:00:36 +0000 Manifest next update: Thu 24 Jul 2025 08:00:36 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: EBMfXHv29VZq+M+QhT8bKFJepZpjZgg09Tat2nq0vyY=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: ftQ60SsjWVubYA-VxNEHamWbBek.roa (hash: jmvMdMMJCzUDXr3r5E5qmHQUJ9DFMdQTkl3lYF+bB84=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:4c:74:5d:59:9c:94:72:6b:a7:e5:ba:e6:b0:75:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jul 23 08:00:36 2025 GMT Not After : Jul 24 08:00:36 2025 GMT Subject: CN=db9fbe2a08f0627b66495f4572ccb9450e0c5bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:34:49:f4:de:c4:c3:d1:50:84:d7:54:89: ed:bb:e1:fc:06:a8:87:00:e1:f9:37:bf:c0:90:8a: 6e:33:24:1d:96:75:49:7e:1f:9d:29:1b:f9:16:d2: 18:bd:aa:05:7a:0f:f6:77:ec:85:a2:26:f2:c8:ae: 43:24:82:45:37:a6:09:16:79:9c:b7:5d:40:85:3e: 09:bc:55:19:9a:df:5a:b9:fc:b3:b2:94:84:60:c2: 25:c2:e5:4c:95:63:72:93:6c:7d:ad:26:60:4e:89: 00:c6:7e:e4:69:ce:e5:8f:37:f8:f0:99:3f:b1:9c: 76:83:62:10:ff:62:45:39:65:a5:f4:a2:0c:0e:9b: 55:ac:f0:6a:57:bb:21:f1:1f:ee:09:73:3d:7a:e8: d0:94:f6:93:59:73:5a:c5:ff:42:82:e7:68:0d:62: 43:49:1b:d3:53:1d:6e:3c:7f:6f:22:4c:d9:a9:da: e6:6e:55:7b:0f:9e:cb:a1:75:e9:eb:26:e3:14:c1: 94:7d:e9:4e:ce:cf:1f:7f:d0:a1:9e:11:5a:d8:a5: 28:20:30:76:67:12:b2:37:b6:e6:60:35:8a:95:b5: f4:04:b7:83:f9:28:e6:e5:8b:d2:e2:2f:aa:3a:79: 66:82:6d:a2:ba:e7:66:86:bb:8b:e8:a3:9d:7e:07: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9F:BE:2A:08:F0:62:7B:66:49:5F:45:72:CC:B9:45:0E:0C:5B:D3 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2d:ee:1a:f9:fb:65:3f:8e:30:8f:9e:34:0e:f0:34:54:61: a2:97:6a:c1:90:4d:8f:05:25:2b:d2:16:22:05:02:05:7b:c5: bc:c3:41:13:4e:dc:b0:dc:13:c5:f6:e0:d9:c7:0b:52:88:52: 27:9a:b8:41:d2:aa:18:3a:0a:7b:1a:24:77:da:32:62:bd:43: 58:ce:b1:27:60:9b:62:58:92:cc:7e:44:56:bc:dd:c7:2c:1a: 01:92:cc:78:91:92:29:90:3f:d0:fc:32:82:39:db:9a:92:cd: 3e:ee:db:19:ca:30:90:3d:9a:6b:23:99:7e:7e:00:10:53:a3: 8a:e3:f2:f0:d5:c1:61:d0:ee:48:70:09:47:ba:b2:ec:d1:76: 88:7e:df:53:94:52:19:ab:5b:72:c4:45:6b:88:e1:2f:92:3b: c8:d0:03:57:f2:5c:37:78:93:75:91:ea:63:de:9b:86:32:9e: aa:aa:0a:79:59:fd:f2:d0:7d:a2:18:a3:12:8e:1a:c6:61:da: 28:f0:a7:c7:74:10:59:a5:47:bc:e8:b7:f5:ff:9b:ab:ae:1c: d0:6f:56:6e:a0:77:ff:15:3a:77:32:0d:0e:c9:7b:19:a9:ce: 28:29:91:d1:4a:7f:f9:06:cb:cf:97:13:3c:f8:1c:d6:15:be: 98:b7:e2:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2THRdWZyUcmun5brmsHXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwNzIzMDgwMDM2WhcNMjUwNzI0MDgwMDM2WjAzMTEwLwYDVQQD EyhkYjlmYmUyYTA4ZjA2MjdiNjY0OTVmNDU3MmNjYjk0NTBlMGM1YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUU0SfTexMPRUITXVIntu+H8BqiH AOH5N7/AkIpuMyQdlnVJfh+dKRv5FtIYvaoFeg/2d+yFoibyyK5DJIJFN6YJFnmc t11AhT4JvFUZmt9aufyzspSEYMIlwuVMlWNyk2x9rSZgTokAxn7kac7ljzf48Jk/ sZx2g2IQ/2JFOWWl9KIMDptVrPBqV7sh8R/uCXM9eujQlPaTWXNaxf9CgudoDWJD SRvTUx1uPH9vIkzZqdrmblV7D57LoXXp6ybjFMGUfelOzs8ff9ChnhFa2KUoIDB2 ZxKyN7bmYDWKlbX0BLeD+Sjm5YvS4i+qOnlmgm2iuudmhruL6KOdfgcFDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNufvioI8GJ7ZklfRXLMuUUODFvTMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsy3uGvn7 ZT+OMI+eNA7wNFRhopdqwZBNjwUlK9IWIgUCBXvFvMNBE07csNwTxfbg2ccLUohS J5q4QdKqGDoKexokd9oyYr1DWM6xJ2CbYliSzH5EVrzdxywaAZLMeJGSKZA/0Pwy gjnbmpLNPu7bGcowkD2aayOZfn4AEFOjiuPy8NXBYdDuSHAJR7qy7NF2iH7fU5RS GatbcsRFa4jhL5I7yNADV/JcN3iTdZHqY96bhjKeqqoKeVn98tB9ohijEo4axmHa KPCnx3QQWaVHvOi39f+bq64c0G9WbqB3/xU6dzINDsl7GanOKCmR0Up/+QbLz5cT PPgc1hW+mLfiYA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:45:58 2025 by rpki-client